[FW1] Firewall Virus Checking

[Dennis.Longnecker@FW1-NOSPAMcourts.wa.gov]

Title: RE: [FW1] New worm on the road?

We implemented some of the URI code on our Nokia Checkpoint Firewall-1 box to check for virus's.

 

I have Elron Software's Internet manager on the outside of the firewall monitoring HTTP traffic.

 

Immediately after we installed the URI code, we noticed all the HTTP traffic going out of our firewall had a source ip address of the firewall.

 

I was going to move the monitor back inside the network, but realized we have a quad adapter on the box, so I would not be monitoring some of the workstations activity.

 

Is this the way it is supposed to work?

 

Thanks,

Dennis Longnecker